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Topic 1, Exam Pool A 


Question: 1 


What are two benefits of YANG? (Choose two.) 


A. It enforces the use of a specific encoding format for NETCONF. 
B. It collects statistical constraint analysis information. 

C. It enables multiple leaf statements to exist within a leaf list. 

D. It enforces configuration semantics. 


E. It enforces configuration constraints. 


Answer: A, E 


Explanation: 


Question: 2 
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DRAG DROP 


Drag and drop the threat defense solutions from the left onto their descriptions on the right. 


provides malware protection on endpoints 
provides IPS/IDS capabilities 
performs sacunty analytics by collecting network flows 
protects against email threat vector 


Steaithweatch 


provides DNS protection 


int 
ill 


Answer: 


Explanation: 


StealthWatch 


it 


Question: 3 


Refer to the exhibit. 


aaa new-model 
aaa authentication login default local-case enable 
asa authentication login ADMIN local-case 


username CCNP secret StrOngPéssw0rd! 
line 0 4 
login authentication ADMIN 


https://www.certkillers.net 


Questions & Answers PDF Page 4 


An engineer must create a configuration that executes the show run command and then terminates the 
session when user CCNP legs in. Which configuration change is required? 


A. Add the access-class keyword to the username command 
B. Add the access-class keyword to the aaa authentication command 
C. Add the autocommand keyword to the username command 


D. Add the autocommand keyword to the aaa authentication command 


Answer: C 


Explanation: 


The —autocommand]] causes the specified command to be issued automatically after the user logs in. 
When the command is complete, the session is terminated. Because the command can be any length 
and can contain embedded spaces, commands using the autocommand keyword must be the last option 
on the line. In this specific question, we have to enter this line —username CCNP autocommand show 
running-config||. 


Question: 4 


Wireless users report frequent disconnections from the wireless network. While troubleshooting a 
network engineer finds that after the user a disconnect, the connection re-establishes automatically 
without any input required. The engineer also notices these message logs. 


"2" 


Which action reduces the user impact? 


A. increase the AP heartbeat timeout 
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B. increase BandSelect 
C. enable coverage hole detection 


D. increase the dynamic channel assignment interval 


Answer: D 


Explanation: 


These message logs inform that the radio channel has 
been reset (and the AP must be down briefly). With 
dynamic channel assignment (DCA), the radios can 
frequently switch from one channel to another but it also 
makes disruption. The default DCA interval is 10 minutes, 
which is matched with the time of the message logs. By 
increasing the DCA interval, we can reduce the number of 
times our users are disconnected for changing radio 


channels. 


Question: 5 


Refer to the exhibit. 


Extended IP access isl EGRESS 
10 permit ip 101.100 0 O0 00255 10.1.2.0 0.0.0 255 


20 deny ip any any 


An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 
10.1.2.0/24. The access control list is applied in the outbound direction on router interface 
GigabitEthemet 0/1. Which configuration commands can the engineer use to allow this traffic without 
disrupting existing traffic flows? 
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A) 


config t 
ip access-list extended EGRESS 
permit ip 10.1.10.0 255.255.255.0 10.1.2.0 255.255.255.0 


B) 


config t 
ip access-list extended EGRESS 
5 permit ip 10.1.10.0 0.0.0.255 10.1.2.0 0.0.0.265 


C) 
config t 
ip access-list extended EGRESS2 
permit ip 10.1.10.0 0.0.0.255 10.1.2.0 0.0.0.255 


permit ip 10.1.100.0 0.0.0.255 10.1.2.0 0.0.0.255 
deny ip any any 
! 


interface g0/1 
no ip access-group EGRESS out 
ip access-group EGRESS2 out 


D) 


config t 
ip access-list extended EGRESS 
permit ip 10.1.10.0 0.0.0.255 10.1.2.0 0.0.0.255 


A. Option A 
B. Option B 
C. Option C 


D. Option D 


Answer: B 


Explanation: 
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